Behavioral task
behavioral1
Sample
3126926e82377869be46728af47eff23_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3126926e82377869be46728af47eff23_JaffaCakes118
-
Size
578KB
-
MD5
3126926e82377869be46728af47eff23
-
SHA1
b6c935cc3d6f300dbf9f781c50fdcac2d7919391
-
SHA256
4f50395db20405b0898081ef7754a0e094475b1bc7b5e1241535c75dbe4838ee
-
SHA512
0e4d5d9451053508535f2c4ec9a0ba9f305cf9cc8304c6f8318f232516e0b87ae6c2887b56e5549e4b3675e080748c0a4a6d995dc18727fb26f3c604d1075160
-
SSDEEP
12288:0JXwp1Sv1ize3/HaB8fTLEO9VzoS7En2EoNxDIBuOFe7/uT:Cwp1Sv1Cefc87oELE2ptIoOFdT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3126926e82377869be46728af47eff23_JaffaCakes118
Files
-
3126926e82377869be46728af47eff23_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 724KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE